Create User without enroll - Google Authentication

By: Vipin Jain named 26 Jun 2017 at 1 a.m. CDT

11 Responses
Vipin Jain gravatar
Hello Team, We are investigating a flow where we create the users before users can login with Google Authentication so that they dont enroll into Gluu but they use the account which was created earlier. Please confirm if we can do that and what attributes users will need? Thanks
CentOS72
closed

Answers

By Mohib Zico Account Admin 26 Jun 2017 at 1:05 a.m. CDT

Copy
Mohib Zico gravatar
Hi Vipin, >> where we create the users >> the account which was created earlier. Where is user created? Inside Gluu Server LDAP?

By Vipin Jain named 26 Jun 2017 at 1:17 a.m. CDT

Copy
Vipin Jain gravatar
Hello Mohib, Yes, we wanna create the users first in Gluu Server LDAP for now using SCIM or using Gluu's UI. Thanks

By Mohib Zico Account Admin 26 Jun 2017 at 1:28 a.m. CDT

Copy
Mohib Zico gravatar
Ok... that means ( please correct me if I am wrong ): Only active users ( permitted by your org ) will be able to authenticate in Gluu server with their Google credential.

By Vipin Jain named 26 Jun 2017 at 1:38 a.m. CDT

Copy
Vipin Jain gravatar
Yes, But i created a user with a gmail address as username in Gluu and then try to login with Google Creds using same gmail address and it shows me Incorrect Username/Password. Thanks

By Mohib Zico Account Admin 26 Jun 2017 at 1:40 a.m. CDT

Copy
Mohib Zico gravatar
Naturally, that's not the design right now. I believe it's possible to achieve such but need some custom work in google authentication script. I'll take a look and share plan with you.

By Vipin Jain named 26 Jun 2017 at 1:49 a.m. CDT

Copy
Vipin Jain gravatar
Thank you. Also , i was thinking can we create a user in such a way that Google Auth script accepts it and i also remove the enroll options. Thanks

By Mohib Zico Account Admin 26 Jun 2017 at 2:07 a.m. CDT

Copy
Mohib Zico gravatar
Will check that as well.

By Vipin Jain named 27 Jun 2017 at 4:36 a.m. CDT

Copy
Vipin Jain gravatar
Hi Mohib, Did you get a chance to check this?

By Mohib Zico Account Admin 27 Jun 2017 at 5:19 a.m. CDT

Copy
Mohib Zico gravatar
Yes, it's possible. I took example from [Duo script](https://github.com/GluuFederation/oxAuth/blob/master/Server/integrations/duo/DuoExternalAuthenticator.py) and used that as reference for my custom Google authentication script.

By Vipin Jain named 27 Jun 2017 at 5:31 a.m. CDT

Copy
Vipin Jain gravatar
Thanks, Do i need to use this script in my Google Authentication or change it for my use case?

By Mohib Zico Account Admin 27 Jun 2017 at 5:32 a.m. CDT

Copy
Mohib Zico gravatar
You need to modify your Google Authentication script according to that, take Duo as reference.

Post an answer